PT-2006-5013 · Cisco · Cisco Pix 500 Series Security Appliances

Published 2006-08-17 · Updated 2024-08-07 · CVE-2006-4194

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco PIX 500 Series Security Appliances (affected versions not specified)

Description The issue involves an unspecified vulnerability related to Session Initiation Protocol (SIP) fixup commands, allowing remote attackers to send arbitrary UDP packets to intranet devices. However, the vendor has been unable to reproduce the issue after working with the researcher.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-4194

Affected Products

Cisco Pix 500 Series Security Appliances

References · 7

• http://cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4194 · Security Note
• http://securityfocus.com/bid/19536 · Note
• http://networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5 · Note
• http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html · Note
• http://osvdb.org/29781 · Note
• http://idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away · Note